Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: SQESSmOHogfGcvg6++6QlDowFAQ1THlTFYOaFaHVqNM=
Subject key identifier: E4:F5:1A:3D:BC:53:B4:F7:13:FB:DC:DA:81:DA:E1:EC:D5:62:C6:31
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 0197B9D90B264A3D8B9C650F27DFE7FE5956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0873
Signing time: Sun 29 Jun 2025 04:01:38 +0000
Manifest this update: Sun 29 Jun 2025 04:01:38 +0000
Manifest next update: Mon 30 Jun 2025 04:01:38 +0000
Files and hashes: 1: IVNizmINzGKtS16vA6MUtf-GXl0.roa (hash: G8i6jSbmxzUZcDObDJ5m5iiPjmE+XboSGsF4lQOtdC8=)
2: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: bSi6cdspZQLgVB792S/JW9IT05Z4Ia9w5oFuVAwCJgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d9:0b:26:4a:3d:8b:9c:65:0f:27:df:e7:fe:59:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Jun 29 04:01:38 2025 GMT
Not After : Jun 30 04:01:38 2025 GMT
Subject: CN=e4f51a3dbc53b4f713fbdcda81dae1ecd562c631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:28:f1:a1:97:66:ad:ca:ee:30:1c:f0:cd:bb:
06:c8:e5:5a:2a:85:8a:cf:db:f8:94:ac:28:d8:bd:
bf:b6:d8:70:1d:cc:ec:5a:90:69:0a:82:ae:65:63:
30:b9:38:c2:42:04:a8:22:7f:05:43:db:80:3f:ad:
bf:f6:da:ee:a7:10:d1:fa:fc:10:30:40:13:61:d0:
e7:cc:22:ae:6c:59:c2:a4:e9:23:5e:65:30:3b:c7:
03:75:bd:7b:1a:0d:3a:c8:92:27:23:97:93:96:7b:
fa:59:15:7f:49:07:55:ed:eb:41:ee:03:d9:e3:7a:
91:b8:a0:f3:c6:2f:c3:d1:da:cf:fd:20:f9:5a:0d:
41:7a:d6:e7:09:0c:c9:f1:87:61:60:ba:7c:e0:f8:
33:72:b2:39:e9:5c:73:5c:cf:c7:00:8e:19:97:80:
a0:d7:76:9b:f2:9b:39:37:29:44:c4:12:42:07:d4:
49:f6:2d:ef:cf:ca:13:eb:b3:a4:8d:9f:41:c7:17:
5b:bf:5e:04:23:47:6d:08:e4:b3:d3:b3:11:1f:7d:
04:24:34:9d:e3:c8:7f:8f:4e:7c:7a:1c:6e:d7:e4:
ac:6f:82:4f:6a:35:03:b6:03:9c:a0:4c:4f:a7:d7:
70:44:9e:b5:36:4b:92:17:17:8d:9b:09:32:83:be:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:F5:1A:3D:BC:53:B4:F7:13:FB:DC:DA:81:DA:E1:EC:D5:62:C6:31
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:ba:7f:90:7d:2f:8a:8e:2f:5b:75:c8:0a:5b:42:50:aa:22:
b7:a2:6d:fd:1e:1d:b3:e1:b9:2c:73:fa:33:9a:e7:2a:9f:99:
25:5a:88:60:a1:04:23:df:24:0e:55:8b:07:a3:18:63:49:4e:
ca:8d:82:6d:b8:ca:40:a6:ca:7a:78:44:c8:b6:3d:c6:7e:e0:
32:f0:e0:c2:b2:5d:0e:c1:be:ea:9c:83:77:38:c0:92:a4:1d:
1a:76:d6:44:07:bc:f3:c1:d3:b7:46:aa:05:c9:fe:2f:27:43:
66:9c:33:f3:28:96:fc:60:71:f3:27:02:5b:09:a2:28:04:a7:
3e:8c:78:60:ba:16:cc:33:f6:de:65:86:7e:7b:2d:59:e0:00:
b1:43:bd:9b:0d:0f:c3:77:b0:16:c7:75:49:99:23:17:8d:38:
ea:7e:e2:d4:29:37:ac:74:21:79:9d:6c:9b:9b:98:95:72:b5:
1e:5c:e2:6d:dd:0d:8b:ad:10:28:97:77:ad:af:34:ea:83:8d:
e1:8e:7d:27:cb:d4:ad:6b:a2:59:68:40:0b:83:7c:25:5f:e2:
5d:a5:bc:43:42:86:70:04:97:52:cc:b4:39:27:4b:4e:80:d2:
01:35:a3:8b:c6:46:7f:c4:5e:3b:50:c8:67:b0:6d:df:87:ca:
69:2a:5d:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52QsmSj2LnGUPJ9/n/llWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MGY0MGJkYjllNjY0NzY5ZTkxNzU5MGY3OGRiNmU3NzE5
M2Q3NTEwHhcNMjUwNjI5MDQwMTM4WhcNMjUwNjMwMDQwMTM4WjAzMTEwLwYDVQQD
EyhlNGY1MWEzZGJjNTNiNGY3MTNmYmRjZGE4MWRhZTFlY2Q1NjJjNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgijxoZdmrcruMBzwzbsGyOVaKoWK
z9v4lKwo2L2/tthwHczsWpBpCoKuZWMwuTjCQgSoIn8FQ9uAP62/9trupxDR+vwQ
MEATYdDnzCKubFnCpOkjXmUwO8cDdb17Gg06yJInI5eTlnv6WRV/SQdV7etB7gPZ
43qRuKDzxi/D0drP/SD5Wg1BetbnCQzJ8YdhYLp84PgzcrI56VxzXM/HAI4Zl4Cg
13ab8ps5NylExBJCB9RJ9i3vz8oT67OkjZ9Bxxdbv14EI0dtCOSz07MRH30EJDSd
48h/j058ehxu1+Ssb4JPajUDtgOcoExPp9dwRJ61NkuSFxeNmwkyg77pBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOT1Gj28U7T3E/vc2oHa4ezVYsYxMB8GA1UdIwQY
MBaAFLkPQL255mR2npF1kPeNtudxk9dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEt
NDE1NGRhNWNlYjliLzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9iOTJjYzMtZGRmMS00M2NiLWI0YjEtNDE1NGRhNWNlYjli
LzEvdVE5QXZibm1aSGFla1hXUTk0MjI1M0dUMTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnrp/kH0v
io4vW3XICltCUKoit6Jt/R4ds+G5LHP6M5rnKp+ZJVqIYKEEI98kDlWLB6MYY0lO
yo2CbbjKQKbKenhEyLY9xn7gMvDgwrJdDsG+6pyDdzjAkqQdGnbWRAe888HTt0aq
Bcn+LydDZpwz8yiW/GBx8ycCWwmiKASnPox4YLoWzDP23mWGfnstWeAAsUO9mw0P
w3ewFsd1SZkjF4046n7i1Ck3rHQheZ1sm5uYlXK1Hlzibd0Ni60QKJd3ra806oON
4Y59J8vUrWuiWWhAC4N8JV/iXaW8Q0KGcASXUsy0OSdLToDSATWji8ZGf8ReO1DI
Z7Bt34fKaSpd/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:24:01 2025 by rpki-client